Virus Database

YouAreIll.1186

Description YouAreIll.1186

It is a very dangerous memory resident parasitic virus. It hooks INT 13h, 21h, 28h and writes itself to the end of EXE files (except SCAN*.* and AIDS*.*) that are executed. By hooking INT 28h the virus searches for EXE files, and infects them. While opening .PAS files the virus deletes them. The virus contains the text strings:
*.EXE
.PAS
AIDS SCAN

and "You are ill !" in Russian.

Check other viruses! Be aware! Use Antiviral Software

Priv.1931

Description Priv.1931

It is a dangerous memory resident encrypted parasitic virus. It was found In-The-Wild in Russia in July 1998. The virus hooks INT 1Ch (timer), 21h and writes itself to the end of COM and EXE files that are executed. Starting from July 5th the virus plays a tune, depending on its counters it then displays a message in Russian about formatting data on the hard drive, reads data from the hard drive (instead of formatting) and halts the computer. Replacing one byte of virus code may cause disk writing, i.e. loosing data on the hard drive.

Privet.1152

Description Privet.1152

It is not a dangerous memory resident parasitic virus. It writes itself to the end of .EXE files (except EXE files that are packed with PKLite utility). When an infected file is executed, the virus searches for .EXE files in the current directory and infects them. The virus then hooks INT 21h, stays memory resident and searches for .EXE files to infect them when any file is executed, loaded for debugging or as an overlay (INT 21h, AH=4Bh).
Depending on its generation the virus displays a message in Russian. The virus also contains the string:
*.exe skh

Home